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Abstract 

It has been known that quantum error correction via concatenated 
codes can be done with exponentiaUy small failure rate if the error rate 
for physical qubits is below a certain accuracy threshold. Other, uncon- 
catenated codes with their own attractive features — improved accuracy 
threshold, local operations — have also been studied. By iteratively dis- 
tilling a certain two-qubit entangled state it is shown how to perform an 
encoded Toffoli gate, important for universal computation, on CSS codes 
that are either unconcatenated or, for a range of very large block sizes, 
singly concatenated. 

1 Codes and computation 

At the end of the long tunnel of experimental quantum eomputing there is 
the light of accuracy thresholds provided by quantum error correcting codes. 
The lengthy computations necessary for efficient factorization and simulation of 
quantum systems are all of a sudden possible if error rates for qubits are reduced 
below certain critical values in a sufficiently parallel quantum computer. The 
quantum codes which give rise to this intriguing phase transition work on the 
same basic principle as their classical precursors — they keep information secure 
by using more physical (qu)bits per logical (qu)bit of the code. What is desired 
of quantum codes is that, as this redundancy is increased, there should be 
exponential improvement in the storage/computation fidelity of the code. Once 
the basic problem of correcting fully quantum errors was solved by the advent 
of quantum codes, a general recipe was obtained for expanding a given few- 
qubit code to achieve these exponential fidelity gains. This recipe generates a 
new higher level code by mimicking the old code, but with the role of physical 
qubits played by logical qubits of the old code. Detailed methods of error 
correction and computation have been obtained for versions of this recipe with 
an arbitrary number of iterations or "concatenations" — even when faults might 
occur in error correction processes themselves 0-0. 

However, different frameworks for fault-tolerant error correction, e.g. topo- 
logical quantum codes [p[-p3[|, might prove superior, and more general methods 



for universal computation are desirable. Here, it is shown how to achieve uni- 
versal fault-tolerant computation by construction of a Toffoli (C-C-NOT) gate 
on encoded qubits, provided the code possesses a normahzer operator (C-NOT) 
which factors over the qubits in a block. 

Most known quantum error correcting codes can be defined by a set of op- 
erators, the stabilizer, each of which fixes every codeword. For a number of 
stabilizer codes capable of simple operations, like a bit flip Xa or phase flip 
Za on logical qubits a,b, . . it is also known how to perform any "normalizer" 
operation — i.e. one that can be built from a sequence of operations involving 
only the C-NOT Xab, 7r/2 phase shift, and Hadamard rotation Ra- Normalizer 
operations alone, however, are insufficient for universal quantum computation; 
a quantum computer with only normalizer operations can be simulated in poly- 
nomial time by a classical machine. A genuine quantum computer is realized 
either by the addition of a non-trivial one or two-qubit gate, like a single qubit 
rotation by an irrational multiple of tt, or of a three-qubit gate like the Toffoli. 
Here, Shor's procedure ||l[ for performing a Toffoli given the ancilla state 

IV^s) = |000) + |001) + |010) + |100), (1) 

will be rephrased and then a new method will be given for preparing this state, 
which does not rely on any concatenated structure within the code itself. 

2 Toffoli gate from 

It turns out one can perform a Toffoli gate on three qubits ABC given normal- 
izer operations and three ancilla qubits abc prepared in the state IV'a)- First 
consider the following construction, which uses one ancilla bit c. Letting c start 
as |0), suppose one could perform a "majority vote" on A i? c so that, for exam- 
ple, |010) |000) and |110) — > |111). Equivalently, one might majority vote, 
but only carry out the effect on c, leaving A and B unchanged, so |010) |010) 
and |110} Now just C-NOT c into C and disentangle c from ABC. 

The result is exactly a Toffoli on ABC. 

To majority vote on AB c, one measures ZaZb and ZbZc. If both measure- 
ment results are -1-1, AB c are already unanimous. Otherwise, the measurement 
results will reveal which bit is the odd-one- out. Unfortunately, these measure- 
ments have also revealed information about the initial state AB, in general 
collapsing it, inconsistent with the desired Toffoli gate, a linear operation. The 
solution is to perform a majority vote not directly on AB c but on three ancilla 
qubits, which are first entangled with AB. Here is where {Tps) enters. 

Given some arbitrary state oi ABC, prepare a 5c as IV^a) and perform the 
following operations: (I) C-NOT A into a and B into b, and (II) majority vote 
on a 6 c (by measuring ZaZb and ZbZc and flipping the odd-bit-out if necessary). 
Suppose, for example, the measurement results from (II) are ZaZb = —1 and 
ZbZc ~ +1. All but 8 terms will be collapsed away of the total 2^^ x 4 = 32 
terms in the initial 6-qubit state. These 8 terms, as they undergo (I) and (II), 
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are (suppressing bra-ket notation): 



OOColOO 
OlCiOOl 

10C2000 
11C3010 

where Ci = 0, 1. Note that aU of the 8 possible bit values for ABC arc equally 
represented, so that all information in the initial superposition of A B C is pre- 
served (albeit dccohcrcntly) . Now C-NOT c into C. From the above tabic, this 
will flip C iS AB are 01 — not iS AB are 11, as desired for the Toffoli. Applying 
Xbc then gives the desired result. Finally, ABC must be disentangled from the 
ancillas a 6 c to restore the coherence of the original state. This is accomplished 
by applying Xab and Xac and then measuring Xa- If the result is +1, ABC are 
disentangled. If —1, a phase error on the AB = 01 term has been introduced; 
it may be corrected by applying XaZabXa, where Zab = RbXabRb is the 
controUed-phase (C-PHASE) gate. 

Had the measurement results for ZaZh and Z^Zc been other than —1 and +1 
respectively, as in the above example, it is straightforward to determine what 
gates must be applied in place of Xbc and XaZabXa- 

The Toffoli now just requires preparation of the three-qubit state IV's)- First 
observe that if one can prepare 

1^2) = |00) + |01) + |10), 

IV's) niay be obtained by preparing four qubits abed in the state |V'2)|V'2)5 mea- 
suring ZfyZc, and performing a few simple normalizer operations. In particular, 
the measurement result —1 gives the state 

|0010) + |0100) + |0101) + |1010), 

which can be turned into |'^i'3)|l) by applying the C-NOTs: Xac, ^db, ^ad-, ^bd, 
and Xcd in that order. 

3 \iIj2) from p{ai) 

Let us define p(ai, 0:2, 0:3) as the (unnormalized) mixed state 

1 ai 

0/2 ces 

in the basis {|'02}, where jasj < 1. It turns out, in the continuum of states 

p(ai), there is nothing special about \ip2), obtained as a, 0. Being able to 
prepare any one state p{ai) with [a^] < 1 is sufficient to prepare \tp2), hence to 
prepare IV'3) and construct a ToS^oIi gate. 



I II 

-> OOColOO ^ OOCoOOO 

^ OlCiOll ^ OlCilll 

10C2100 ^ 10C2000 

^ 11C3100 ^ 11C3000 
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The state is prepared by combining two copies of p{ai) through mea- 
surement to obtain a new mixed state which is closer to \'ip2) than before, and 
combining two of these to get one stiU closer, etc., progressively distilling \ip2) 
from the initial states. To start, prepare qubits abcdin the state po'S'Po, where 
Po = p{ai), and measure ZaZc and Z^Zd- Suppose the results are +1 and +1. 
Now perform Xac and Xm to disentangle cd. For pure states, this whole process 
would give \ip2)\i^2) ^ |V'2)|00) and |11)|11) |11)|00), while either of the ini- 
tial states |V'2)|11) or |11)|'02) are inconsistent with the assumed measurement 
results. In terms of mixed states, this means po® po ^ pi® |00)(00| where pi 
is 
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which is exactly p{af). Prepare another pi from two new po states, and combine 
the two pi states by again measuring ZaZc and ZhZd- Supposing the results 
are again +1 and +1, cd are disentangled, leaving a 6 in the state p2 = p{cef)- 
Continuing this process through N levels gives Pn — p{<^^ )• The whole pro- 
cedure may be pictured as a tree of pL states, joining in pairs from level L = 
to L = N (see Fig. |]). The recursiveness is reminiscent of concatenated codes, 
but here the complexity appears in the auxiliary distillation process, not in the 
code itself. 

The fidelity in preparing \ip2) is 

, _ ^ tr(pjv|V;2)(V'2|) ^ 3 

~ tr{pN){H^2) 3 + af 

very close to 1 if jaaj < 1. The number of (logical) qubits used to achieve this 
fidelity is ~ 2^, which by (||) is ~ loge/ log |a3|. This is the same kind of polylog 
scaling desired from the code itself (referring to the scaling of block size with 
desired failure rate e). Finding the number of operations on encoded qubits 
necessary to prepare IV'2) is not as easy, since the assumption that all ZaZh, 
Zf-Zd measurement outcomes are -1-1,-1-1 requires repetition of the procedure a 
number of times before one expects such to occur. 

To prepare a single p^ state prepare two pl-i states and then combine them 
by measurements. If the measurement results are not -1-1,-1-1, just discard these 
states and keep trying. (This is not an optimal procedure, but it will suffice.) 
Therefore, if the chances of any one attempt succeeding are P{L), the expected 
number of logical operations G{L) necessary to prepare pL is ^ 2G{L — 1)/ P{L). 
This assumes high confidence in the one pair of measurement results +1,-1-1, 
which should be the case since abed are logical qubits. But even if there is a 
significant probability e„i ^ e for any one measurement result to be in error, the 
distillation procedure can be made robust. Once a -|-1,-|-1 result is obtained, just 
repeat the measurements a number of times and accept the state only if, say, a 
majority of the results are -1-1,-1-1. To get 1 — e confidence in the measurement 
outcome, one must repeat ^ loge/ log em times. This implies 

C(L).ji^G(L-l) + j^, (3) 
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It is not hard to see that P{L) must increase with L, since this recursion 
relation imphes that either \ip2) will quickly begin to dominate successive pL 
states, in which case P{L) 1/3, or |11) will dominate and P{L) 1. Both 
of these values are larger than P(l), which can be calculated as a function of 
jaal < 1 but is always bounded from below by 1/4. Iterating (|^) with this bound 
gives 

Gw^s^i^^ ., . (4) 

log Em (loglasD'^logem 

Note that G{N) is the total number of logical operations, but these can be 
done in parallel so that the actual distillation time is ~ iV log e/ log em ~ 
log(| loge|) log e/ log Em- The point is that even with the demand of a definite 
sequence of measurement results, time requirements still scale polylogarithmi- 
cally with e. The crucial fact leading to this scaling is that the probability for 
getting the measurement results +1,+1 in combining two pL states is finite as 
L — > 00. Thus one can prepare IV'2}, iV's); ^^'^ execute a Toffoli gate if one can 
prepare one of the mixed states p{ai) with jaaj < 1. 

There are multiple ways of obtaining a state pdaaj < 1) for codes which are 
not too large. In fact, Shor's own procedure for preparing \ipz) can do so. An 
alternative method will be presented here, applicable to codes possessing a non- 
trivial normalizer operation (here C-NOT) that is transversal, so the encoded 
operation factors into a number of independent operations on physical qubits. 
The method works by performing a very noisy measurement of the C-NOT 
operator. 



4 Noisy measurement of C-NOT 

Were it possible to measure C-NOT with high fidelity, one could easily prepare 
IV'2) = p{cti = 0). It turns out imperfect measurement of C-NOT is still capable 
of yielding p{\a3\ < 1). 

For reference, the eigenstates of the C-NOT operator Xab are |00), jOl), 
and |10) -I- |11) with eigenvalue -1-1, and |10) — |11) with eigenvalue —1. Let 
us first describe a fault- mtolerant measurement procedure, that is, one which 
permits a single error to spread rampantly throughout a block. Prepare one 
physical ancilla bit cq as |0} and apply a certain three-bit gate Uaibico bitwise 
over physical bits and bi in the blocks encoding a and b (but always using the 
bit Co). U is shown in Fig. |^. The first Hadamard rotation causes the Toffoli to 
flip Co just if Uibi start in the —1 eigenstate |10) — |11) of X^.f,., and the second 
Hadamard undoes the effect on bi. 

Apply U bitwise over a b and measure Zc„ ■ The result = ±1 is equivalent 
to the result that Xab = Hi^aibi = ±1, so one has effectively measured Xab- 
To understand this process in detail, expand the initial state of a 6 in eigenstates 
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of the operators Xa^ti for i = 1, . . . , n: 



where |x) = \xi ■ ■ ■ Xn) and each \xi) is one of the four cigonstatcs {xi = 1,2,3,4) 
of Xaibi- The right hand sum is rearranged to segregate strings of even and 
odd weight. The weight function ?l'(x) equals the munber (mod 2) of "4"s 
occurring in the string x, = 4 corresponding to the —1 eigenstate |10) — |11) 
of Xaibi- Using the transversahty of C-NOT and the definition of t«(x), one 
finds Xab|x) = (— l)"'^''^ |x). Thus the sum over strings with 7i;(x) = is the 
projection onto the +1 eigenspace of Xab, and the sum with w{yi) = 1 is the 
projection onto the —1 eigenspace. It follows that the action of = Hj Ua^bico 
is 

U\yi)ab\Q)ca = |x)a6|w(x))c„, 

which means measuring Z^q is equivalent to measuring X^b- 

This method of measurement is highly sensitive to errors; just one physical 
bit error can change w;(x) for an entire string of bits, making the measurement 
result erroneous. As the block size n gets large, the chances of an even number 
of such errors occurring becomes nearly equal to the chances of an odd num- 
ber occurring. Thus the measurement result tells very little about whether a 
+1 eigenstate or a —1 eigenstate of Xab has been obtained. This little bit of 
information, however, turns out to be important for preparing \ip2)- 

As mentioned the above procedure is fault-intolerant, since one physical bit 
phase error may infect cq and thus spread rampantly throughout the block. It 
can be made fault-tolerant by using an ancilla c, which is not just one bit, but 
a superposition of n physical bits over all even weight strings ( "weight" is now 
in the sense of counting "l"s). Such a superposition is prepared as 

|even)e= [U.^'^^ (|0 • • • 0)^ + |1 • • • 1)^). 

The gate Ua,biCi will be applied bitwise across a fee so that a single error in one 
block can at most spread to one bit in each of the other two blocks. Acting 
bitwise on )ci through |a;„)| )c„, U will flip a number of bits in the initial 
c state equal (mod 2) to exactly w(x). Thus 

t/|x).|eve„,.{W.;|->; (5, 

Measuring bitwise over c with the result Hi = ±1 is now equivalent 

to measuring Xab with the result Xab = ±1- Note that a single phase error 
in the n-bit cat state, or equivalently a bit flip in the sum over even weight 
strings, will change this sum into one over odd weight strings, again altering the 
measurement result while still projecting the state onto one of the eigenspaces of 
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Xab- So the measurement procedure is now fault-tolerant, but the measurement 
result is still highly sensitive to single bit errors, giving little information about 
which eigenspace the state | )ab collapses into. 

One can also perform a noisy measurement of the C-PHASE operator Zab- 
The action of Zab is just to apply a minus sign if a 6 are in |11), which is unitarily 
equivalent to Xab through the basis change Rb- To measure Zab first apply i?b, 
then measure Xab by the above method, and reapply Rb- These procedures may 
be adapted, by changing the bitwise operation U, to noisy measurement of such 
operators as XabXcd, ZabZcd, and ZabZbc- 

5 Preparation of p{ai) 

First prepare two logical qubits a 6 as (|0) + 11))^ and measure Zab by the method 
given above, making use of an ancilla block c. If the measurement result were +1 
and all qubits were error-free, one would have prepared exactly \ip2)- But this 
will be changed by errors {i.e. decoherence, gate errors, or measurement errors) 
occurring either to the bits encoding a and b or to those of the cat-like ancilla 
c used in the noisy measurement procedure. In fact c is especially vulnerable 
because it is not protected by any code at all — a single bit error anywhere in c 
can reverse the observed measurement result for Zab. 

Depending on whether errors are unitary or decoherent, this yields a coher- 
erent or incoherent superposition of \ip2) and |11), which will be shown to be of 
the form pdaal < 1) in either the unitary or decoherent case, hence a candidate 
for distillation. 

Phase errors to the bits of a 6 cannot be transmitted to c by the above pro- 
cedure, so are irrelevant. Bit flip errors to a 5 can be transmitted but are equiv- 
alent to bit flip errors occurring to the bits of c so all errors can be effectively 
regarded as occurring to c alone. Let us first consider the case of (uncorrelated) 
errors purely decoherent in the Pauli basis u™, so that each qubit Ci suffers no 
error, a phase error, a bit error, or both errors — each with some fixed classical 
probability. 

Phase errors in c can affect only the relative sign of terms in |even)c and 
|odd)c of (|^), hence are extinguished once the Z^ measurements are made. 
Depending on whether c is attacked by an even or odd number of bit errors, the 
measured eigenvalue of Zab will be inferred either rightly or wrongly from the 
outcome of the Z^ measurements. So given the result Yii = +1, an even 
number of bits errors will yield \Tp2) as desired; however, an odd number will 
yield |11) unbeknownst to us. 

If each Ci suffers a bit error with probability pi , the difference between the 
chances of an even number of bit errors and of an odd number is 

( n E ) (-i)"-pr(i -p.)'-^' = 11(1 - 2p,). (6) 

\i=lxi=0,l/ i 

Given that these two probabilities sum to 1 , this implies the preparation proce- 
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dure will yield not exactly |i/)2), but the state p(0, 0, a^) with 



where the last expression holds for large n. It thus appears that one cannot 
tell whether or not jaaj < 1 for a given ancilla block c if even a few of its 
bits might have pi > 1/2. This is true even though current codes themselves 
are completely robust to these "defective" bits so long as their distribution is 
suitably uncorrelated and infrequent at the level of the code's threshold error 
rate. Still what has to be considered for the distillation process is not a single 
ancilla block c, giving rise to one |?/'2)-like state, but a sequence of such blocks, 
each with its own set of defective bits and consequent value of 0:3 = , where 
m runs from 1 to 2^, the number of |-02)-like states input to the distillation 
process. 

The fidelity in distilling |-02) is that given by (|^) with replaced by 



n 



4") «e-2"^'(n.(i-2p.)). 



where (• • •) is an average over the ensemble of c blocks. Assuming errors are un- 
correlated between different c blocks, the average factorizes and the distillation 
fidelity is 

Here only the ensemble averaged bit fiip error rates appear. Assuming the lo- 
cations of defective qubits are uncorrelated between different c blocks, their 
Pi > 1/2 contributions are simply weighted out in the average. This means 
infrequent defective bits no longer pose a problem, owing to the distributed na- 
ture of the distillation process. Defining an average error rate p — (1/n) J2i{Pi)> 
the above product is approximately e^^P". In order that the resulting fidelity 
be comparable to that of the code itself, which is ~ 1 — cxp{—Kn^) for some 
power P and constant K, the number of physical qubits used in distillation is 
roughly 

n2^ ^ ni+'^e^f", 

which puts a limit on the block size n of the code being used, since the number of 
qubits used in distillation should not grow exponentially with block size. Thus 
n cannot be larger than 

n--log-. (7) 

p p 

The opposite case of purely unitary errors is the same in its result. Here, 
errors comprise a set of unitary operators which act on the Cj respectively. Each 
such operator can be written in the Pauli basis and put in the form 
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where Aj,Bj,Cj,Dj are real. Assuming low error rates, so Yl^ \ Ai\ Yl - \Bi\ 
and likewise with C'i and Di in place of Bi , one can show that these errors take 
c from its prepared state |even) to 



JJ^iJileven) = |even) + i tan(Ec')lodd), 



where Sc w tan^^(Ci/yli). This leads to preparation of the state \ip2) + 
i tan(I]c')|ll) in place of \ip2)- But this state is precisely p{ai) with ai,2 = 
itan(I]c) and as = — tan^(I]c), which can be distilled to \ip2) if tan^(I]c') < 1. 
For large n, will be very sensitive to the error amplitudes C^, and in practice 
one would have no way of knowing whether ta,ii(Y.c) < 1 or not. This is the same 
problem noted above in the case of pure decoherence, and it too disappears when 
one realizes that the distillation input is not a single state |'(/'2) + itan(E(7)|ll) 
but an ensemble of such states each generated by a different set of blocks a be. 
The distillation fidelity is now given by (||) with a§ replaced by 



where (• • •) again averages over the ensemble of c blocks. Using this, the defini- 
tion of Sc, and expanding the logarithm gives (log(tan Ec")) as 



The factorization follows assuming independence of errors between different 
qubits in each c block. Now expand the exponential in a power series. If the 
error distributions are all such that the two bit flip amplitudes Ci and — C; are 
equally likely to occur, the expectation values of the odd terms in the power 
series vanish. (If the distributions are otherwise, one might use the computa- 
tional basis {|0), — 11)} instead of {|0), |1)} for the qubits in half the c blocks, 
so that the same physical error would correspond to the bit flip amplitude —Ci 
as often as it would to Ci.) The even terms may then be resummed and the 
expectation value in (||) becomes 



where (pi) = {Cf /A^) to lowest order in Ci/Ai, hence {pi) can be taken roughly 
as a bit flip error rate. For small k the cosine functions will be close to 1, and 
the product over i will be greatest. As k gets large, the cosines will sample 
their full range and the product will be highly suppressed. Therefore the cosine 
above can be replaced by exp(— 2(2fc-|- as if k were always small, giving 

the main contribution to the sum: 



n tan2(Ec) 



g2" + i(log(tanSc)) 



m=l 




(8) 




OC 



2 



(log(tanI]c)) 



E 



2fc-|- 1 
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where p is again the average of (pi) over i — 1, . . . ,n; this is basically the same 
result as obtained for purely decoherent errors. Thus again gives the largest 
allowed block size in the regime where the resources needed for distillation scale 
polynomially with block size. 



6 Progressive concatenation 

In case higher fidelity is desired of the code than (|^) allows, the above methods 
by themselves are insufficient and one must resort to concatenation. However, 
in conjunction with these methods, an unconventional, exponentially weaker 
form of concatenation can be used. A usual concatenated code is self- similar, 
the same abstract code {e.g. the 7-qubit code) being used at each level in its 
recursion. Here one is free to increase the block size at each level, as long as 

is satisfied level-by- level. In these "progressive" concatenated codes, many 
fewer levels are necessary given a desired fidelity 1 — e. 

In particular, for one error correction algorithm in the context of lattice 
codes, some reasonable parameters are p = Pc/10 < 10^'^, so that n = 1000 
is acceptable by (0). Here e (p/Pc)"'^ where /3 = logg 2 « .315, which gives 
e ~ 10~^. So, if the desired fideltiy is below 1 — 10^^, no concatenation is 
necessary. Otherwise, one can begin concatenating. 

Consider a single concatenation of a chosen code. Physical qubits with error 
rate Cq = p are arranged in code blocks of size ni, and these blocks are themselves 
arranged in blocks of size n2. The effective error rate at this higher level is just 
the failure rate of blocks at the lower level: 

ei~(eo/Pc)^"', (9) 

where Pc, K, and (3 come from details of the code being concatenated. The code 
as a whole has failure rate 

e2~(et/pe)^"'. (10) 

where includes the effect of storage errors described by ei and also gate errors 
associated with the operations necessary to perform error correction. Thus el 
will have the same form as ei in (||) but with eo ~ p replaced by a physical 
qubit error rate Cg including the effect of these additional errors. In other words 
one must deal not only with a storage error threshold but also with a gate error 
threshold associated with the computations necessary for error correction. Of 
course, if one intends to use the logical qubits stored by the code for actual 
computations, this would be necessary anyway. 

Assuming the effective error rate Eq is still below threshold, a single concate- 
nation of the code in the above example gives 

where the values K = 1, f3 = logg 2, and — Pc/5 have been used. The 
block sizes ni = 1000 and n2 — 2 ■ 10^ were chosen to be consistent with ^ 
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(l/ej^_;^) log(l/eJ^_;^), i.e. the condition (|^) applied at each level. Thus, as long 
as one does not require a fidelity better than 1 — 10~*^°, a single concatenation 
is sufhcient given the above parameters. 

Because the block sizes may increase so rapidly, the number N of levels 
necessary for a desired fidelity 1 — e scales differently than in usual concatenation, 
in which N ^ log(log(l/e)) = log^^^(l/e). For these progressive concatenated 
codes, N is determined self-consistently by ~ log*-^-* (1/e). One might wonder 
about the asymptotic behavior of thresholds and fidelities as ^ oo, taking 
into account the reciprocal effects between progressive concatenation and distil- 
lation; however, this seems irrelevant given the smallness of e already at = 2. 

7 Conclusion and remarks 

It has been shown how to construct a Toffoli gate, the major part of a universal 
gate set, for any CSS code by virtue of its possession of a normalizer operator 
which factorizes over bits of a code block. For the particular code considered 
above very high fidelity, hence large block size, may require a single concatena- 
tion, the primary affect of which would be to unify the error rate thresholds for 
error correction and computation. The method presented derives from the abil- 
ity to perform noisy measurement of the (factorable) C-NOT operator on logical 
qubits. This allows the preparation of a mixed state pdaaj < 1), which can then 
be used in a recursive scheme to distill a certain two-qubit entangled state |'02) 
of logical qubits, which in turn is easily transformed into a three-qubit state 
I -03) that enables the performance of one Toffoli gate on three separate logical 
qubits. 

The point of this construction is to aid the cause of long quantum computa- 
tions that do not rely on concatenated codes. In doing so one trades complexity 
within the code itself for complexity in processes auxiliary to the code with 
the idea that these auxiliary processes may be performed elsewhere, fostering 
division of labor and economy of scale. 

Thanks to Daniel Gottesman, John Preskill, and Atac Imamoglu for com- 
ments on this paper. This work has been supported by ARO grant DAAG55- 
98-1-0366. 
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Figure 2: The operation U on physical qubits Ui bi cq. 
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